8e00c5f5a8
deploy.sh only synced the permission catalog; the system roles (admin, user) were never seeded, leaving the admin Roles page empty after a fresh deploy. Add app:seed-rbac (idempotent) to the deploy script, refresh the embedded script in deployment-docker.md, document the RBAC post-deploy step (with the manual fix for an already-deployed prod), and note it in CLAUDE.md.
45 lines
1.3 KiB
Bash
Executable File
45 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
cd "$(dirname "$0")"
|
|
|
|
TAG="${1:-latest}"
|
|
export LESSTIME_IMAGE_TAG="$TAG"
|
|
|
|
echo "==> Deploying lesstime:${TAG}..."
|
|
|
|
echo "==> Enabling maintenance mode..."
|
|
touch maintenance.on
|
|
|
|
echo "==> Pulling image..."
|
|
sudo docker compose pull
|
|
|
|
echo "==> Starting container..."
|
|
sudo docker compose up -d
|
|
|
|
echo "==> Waiting for container to be ready..."
|
|
sleep 3
|
|
|
|
echo "==> Extracting maintenance page..."
|
|
mkdir -p public
|
|
sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintenance.html
|
|
|
|
echo "==> Running migrations..."
|
|
sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction
|
|
|
|
echo "==> Seeding RBAC system roles (idempotent)..."
|
|
sudo docker compose exec -T -u www-data app php bin/console app:seed-rbac
|
|
|
|
echo "==> Syncing RBAC permissions catalog..."
|
|
sudo docker compose exec -T -u www-data app php bin/console app:sync-permissions
|
|
|
|
echo "==> Clearing cache..."
|
|
sudo docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
|
|
sudo docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
|
|
|
|
echo "==> Disabling maintenance mode..."
|
|
rm -f maintenance.on
|
|
|
|
VERSION=$(sudo docker compose exec -T app cat config/version.yaml | grep 'app.version' | awk -F"'" '{print $2}')
|
|
echo "==> Deployed v${VERSION}"
|